Topic: I was stolen 1.2 btc at bittrex *without* notification.Needing advice! - page 2. (Read 9662 times)
October 01, 2014, 11:27:36 PM
bittrex is a sucky exchange but it raced cryptsy and poloniex
October 01, 2014, 11:20:15 PM
I have gotten emails on potential break in attempts on multiple exchages. Won't get anything but shitcoin dust if they were to get In. But as a precaution, all of my logins have 2fa. I'm a cloud architect and heavily guarded by Sophos next gen endpoint protection on all my machines.
October 01, 2014, 09:19:09 PM
Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.
Just found I was fucked at cryptsy,too.But comparatively small since I rarely visit there.Check your email's last login details.
October 01, 2014, 09:05:37 PM
Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.
Just found I was fucked at cryptsy,too.But comparatively small since I rarely visit there.Check your email's last login details.
October 01, 2014, 09:03:28 PM
Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.
Just found I was fucked at cryptsy,too.But comparatively small since I rarely visit there. 
October 01, 2014, 08:53:18 PM
Did u try turn on 2FA?
With 2FA still has risk of being stole at bittrex.Someone has reported this facthttp://highoncoins.com/cryptocurrency-trading-tips/do-not-use-two-factor-authenticatoin-with-bittrex/
https://bitcointalksearch.org/topic/lost-5btc-from-bittrex-exchange-hacker-stolen-770522
so you turned off 2FA because of risk?
October 01, 2014, 11:54:35 AM
Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.
October 01, 2014, 11:52:15 AM
You can use winauth on an offline laptop or netbook. You can also run it with wine.
https://code.google.com/p/winauth/
http://askubuntu.com/questions/177192/how-do-i-create-a-32-bit-wine-prefix
wine 32 prefix is something you have to do to run it in linux if that's your preferred OS
https://code.google.com/p/winauth/
http://askubuntu.com/questions/177192/how-do-i-create-a-32-bit-wine-prefix
wine 32 prefix is something you have to do to run it in linux if that's your preferred OS
October 01, 2014, 11:26:57 AM
You have a keylogger or trojan on your computer. You must format.
October 01, 2014, 11:24:45 AM
I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.
There are tools for PC that does the same thing although that kind of defeats the purpose because if your PC get compromised the attacker can use that tool just as well. At the very least you should use similar tools from another PC physically, without remote control.
Thanks for your reply.. but I thought 2FA meant I would get an email to confirm before I can log in? So if someone knows my bittrex password they still can't access my account. They would also need my email credentials to verify the login. Does anyone know if this or something similar is this an option with bittrex?
Thank you
Welll, technically 2FA can mean email verification instead of phone verification but that's not what I meant. If your PC got compromised, chances are the attacker also has access to your e-mail account as well which means you're done and he can do whatever he want. I lost my fair share because of my own stupidity and I went through the hoops with the support of an exchange but I can't really blame them for this kind of situations. My PC got compromised with certain passwords saved among an email address without phone 2FA so really, I kind of deserved what I got and I'm just glad that I haven't lost everything. 2FA, sandbox/VM is a must.
Edit:
Technically, you could probably run Google Auth on your desktop, but you would need to use Android emulation software.
There are tools like WinAuth which does the same thing without the need to emulate android. But do not use it on your main PC as it defeats the purpose.
October 01, 2014, 11:17:20 AM
I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.
There are tools for PC that does the same thing although that kind of defeats the purpose because if your PC get compromised the attacker can use that tool just as well. At the very least you should use similar tools from another PC physically, without remote control.
Thanks for your reply.. but I thought 2FA meant I would get an email to confirm before I can log in? So if someone knows my bittrex password they still can't access my account. They would also need my email credentials to verify the login. Does anyone know if this or something similar is this an option with bittrex?
Thank you
October 01, 2014, 11:15:37 AM
checks your rig/pc, it's infected for sure
I have installed eset security long ago and keeping update.Which antivirus program are you recommending.I've tried others but they like to report wallet/miner as virus. October 01, 2014, 11:12:40 AM
I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.
There are tools for PC that does the same thing although that kind of defeats the purpose because if your PC get compromised the attacker can use that tool just as well. At the very least you should use similar tools from another PC physically, without remote control.
October 01, 2014, 11:12:28 AM
have you contact bittrex ask the reason , i think they can help you ,
Did you read my post? I already posted the link to my conversion with bittrex.They are helpless! October 01, 2014, 10:59:52 AM
have you contact bittrex ask the reason , i think they can help you ,
October 01, 2014, 10:46:00 AM
checks your rig/pc, it's infected for sure
October 01, 2014, 10:43:31 AM
I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.
October 01, 2014, 08:11:39 AM
conclusion: don't keep YOUR coins in the exchange. no one is learning from what happened in cryptorush, mintpal, mtgox... ? nothing is 100% secure
send to exchange only when you want to sell/buy.
it will also might give your coins some more value
send to exchange only when you want to sell/buy.
it will also might give your coins some more value
October 01, 2014, 08:08:53 AM
I wonder if some more reports will pop up after this..
October 01, 2014, 07:05:26 AM
I noticed other exchanges logging me out if my IP changes, but bittrex doesn't.
Yes.And bittrex allow buying and selling within the same account which is convenient for pump&dumpers but also for hackers. Jump to: